Lucene search
DebianCVELIST:CVE-2018-0497HistoryJul 28, 2018 - 5:00 p.m.
CVE-2018-0497
2018-07-2817:00:00
debian
www.cve.org
5
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.
CNA Affected
[
{
"product": "ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14"
}
]
}
]Related
nvd
nvd
ubuntucve
ubuntucve
cve
cve
prion
prion
Code injection
2018-07-28 17:29:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
debiancve
debiancve
osv
osv
CVE-2018-0497
2018-07-28 17:29:00
CVE-2016-2107
2016-05-05 01:59:00
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
alpinelinux
alpinelinux
CVE-2018-0497
2018-07-28 17:29:00
ibm
ibm
Security Bulletin: Java Vulnerability in Rational Automation Framework (CVE-2013-0169)
2018-06-17 04:48:04
Security Bulletin: Potential security vulnerabilities in WebSphere Partner Gateway Express for the Oracle CPU April 2013.
2022-09-25 21:06:56
Security Bulletin: Rational Build Forge Security Advisory (CVE-2013-0169)
2018-06-17 04:47:31
nessus
nessus
IBM Tivoli Storage Manager Server 6.3.x < 6.3.4.200 Information Disclosure
2014-08-11 00:00:00
F5 Networks BIG-IP : TLS/DTLS 'Lucky 13' vulnerability (K14190)
2014-10-10 00:00:00
Ipswitch IMail Server 11.x / 12.x < 12.3 Information Disclosure
2014-07-14 00:00:00
cvelist
cvelist
securityvulns
securityvulns
ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
2013-07-15 00:00:00
ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
2013-07-15 00:00:00
ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities
2013-07-15 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2013-042-01)
2022-04-21 00:00:00
OpenSSL: SSL, TLS and DTLS Plaintext Recovery Attack (20130205) - Linux
2021-08-17 00:00:00
OpenSSL: SSL, TLS and DTLS Plaintext Recovery Attack (20130205) - Windows
2021-08-17 00:00:00
veracode
veracode
Timing Attacks
2017-02-10 05:59:15
Timing Side- Channel Attack
2019-01-15 08:52:54
Side Channel Attack
2024-03-06 06:53:02
f5
f5
K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2015-04-30 00:00:00
SOL14190 - TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2013-02-08 00:00:00
K15637 : GnuTLS vulnerability CVE-2013-2116
2014-10-16 00:00:00
debian
debian
[SECURITY] [DLA 1518-1] polarssl security update
2018-09-25 12:26:52
[SECURITY] [DSA 4296-1] mbedtls security update
2018-09-16 20:58:39
[SECURITY] [DSA 2621-1] openssl security update
2013-02-13 20:07:41
slackware
slackware
openssl
2013-02-11 23:49:59
openssl
openssl
Vulnerability in OpenSSL - SSL, TLS and DTLS Plaintext Recovery Attack
2013-02-04 00:00:00
Vulnerability in OpenSSL - Padding oracle in AES-NI CBC MAC check
2016-05-03 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: julia-1.0.1-3.fc29
2018-10-09 00:08:02
[SECURITY] Fedora 29 Update: dolphin-emu-5.0-25.fc29
2018-10-09 00:08:02
[SECURITY] Fedora 28 Update: dolphin-emu-5.0-25.fc28
2018-10-12 20:17:52
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
pentestpartners
pentestpartners
Vulnerabilities that (mostly) aren’t: LUCKY13
2024-05-03 05:12:27
centos
centos
java security update
2013-02-20 20:11:32
java security update
2013-02-20 20:33:43
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
suse
suse
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 17:04:41
Security update for Java (important)
2013-02-22 20:04:33
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-02 00:00:00
amazon
amazon
Important: java-1.6.0-openjdk
2013-03-02 16:50:00
Critical: openssl
2014-04-07 17:26:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2013-02-20 00:00:00
java-1.6.0-openjdk security update
2013-02-20 00:00:00
redhat
redhat
(RHSA-2013:0783) Moderate: openssl security update
2013-05-01 17:58:17
freebsd_advisory
freebsd_advisory
FreeBSD-SA-13:03.openssl
2013-04-02 00:00:00